Can you check what permission are set on that folder and what types files are present inside folder .
Do EICAR test and see that scanner are working fine .
Generate MER and raise support case so that we can look into the issue in more depth.
MAC O/S Error: Unknown error received from scanners
I have the same error. I have a 2016 MBP 15" at 10.12.6.
Is there a fix for this problem? It looks like this problem goes back to 2013.
The newer posts are not in this forum.
Can you check what permissions are set on that folder and what types files are present inside the folder?
What happens if you perform an EICAR test?
If you are receiving Event ID 1048, and event description "Scan reports general system error." on the threat events, as Chealey mentioned it's best to try and check the file types and permissions.
For example, on the linux system that's generating the errors you could do the following:
- If the error occurs in the /usr/sbin/rsyslogd user directory and the scan is having an error on /var/lib/rsyslog/imjournal.state.tmp
Using the Command Line on the system where the error is reported try the following:
cd /usr/sbin/rsyslog ls -l
ls -l <--this will provide permissions on the file
file rsyslog <-- this would tell you what kind of extension the file is
I believe those are the steps that they're wanting us to try. From my experience working with the linux systems in my environment is I've had to exclude file types such as .tmp as the file will appear and be deleted quicker than my OAS is able to process them. With what I understand is it's the inability to "find" these files which can cause this event to occur.
@User91972758 Thank you for your detailed explanation! You've hit the nail on the head with what Chealey--and MD back in 2013--was getting at. These are factors which can cause this messaging. In some cases, like the quick existence and removal (or in some cases rename) of files like .tmp, exclusions are needed in order to avoid the messaging as the files used by the OS are too transient to allow effective scanning for average performance hardware.
Was my reply helpful?
If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?
Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center